chore(deps): bump virtualenv from 21.4.3 to 21.5.0 (#155)

* chore(deps): bump virtualenv from 21.4.3 to 21.5.0

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.4.3 to 21.5.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.4.3...21.5.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: bump tornado to 6.5.7 to fix GHSA-pw6j-qg29-8w7f

CurlAsyncHTTPClient credential leak vulnerability fixed in 6.5.7.

Co-authored-by: aieng-bot <aieng-bot@vectorinstitute.ai>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: aieng-bot[bot] <aieng-bot@vectorinstitute.ai>

Author: dependabot[bot]

pyproject.toml

@@ -19,7 +19,7 @@ dependencies = [
     "requests>=2.34.2",
     "tornado>=6.5.7",
     "urllib3>=2.7.0",
-    "virtualenv==21.4.3",
+    "virtualenv==21.5.0",
 ]
 
 [dependency-groups]